Last updated: October 2026
Information we collect
We collect information you provide during registration, appointment requests and account use, including:
- Name, email address, mobile number and location
- Date of birth and health-related information provided for appointment or programme purposes
- Professional credentials, registration numbers and verification documents (for doctors, coordinators and franchise partners)
- Payment transaction references (we do not store full card or bank account numbers)
- Device, browser and session information collected automatically when you use the platform
How we use information
Information collected is used to:
- Create and manage your account and verify your identity
- Process appointment requests and wellness or care programme enrolments
- Process payments through Razorpay and issue receipts
- Send service notifications, appointment confirmations and care updates via SMS or email
- Review and approve professional registrations
- Improve platform features and resolve technical issues
- Comply with applicable laws and legal obligations
Payment data
Payments on this platform are processed by Razorpay Software Private Limited, a PCI-DSS-compliant payment gateway. When you make a payment:
- Card, UPI, net banking and wallet details are entered directly on Razorpay's secure payment page and are not visible to or stored by us
- We receive only a transaction reference ID, amount, status and masked payment method details from Razorpay
- Razorpay's handling of your payment data is governed by Razorpay's Privacy Policy
Professional documents
Verification documents uploaded by doctors, coordinators and franchise partners (such as medical registration certificates and identity proofs) are accessible only to our authorised verification team for account review and approval. They are not shared with other users.
Data security
We use industry-standard security measures including encrypted connections (HTTPS/TLS), access controls and regular security reviews to protect your information. No system can guarantee absolute security; in the event of a data breach that affects your rights, we will notify affected users as required by applicable law.
Retention and your rights
We retain your information for as long as your account is active and for a reasonable period thereafter to meet legal and operational obligations. You may request access to, correction of, or deletion of your personal data by contacting us. Requests related to payment records may be subject to statutory retention requirements.
Contact
For privacy questions, data access requests or concerns about how your information is handled, please contact us or email privacy@growellhealth.com. We aim to respond within 10 business days.